Creating the Secure Managed Desktop: Chapter 8: Client Security with Wsus 3.0 and Mbsa

by Jeremy A. Moskowitz, Greg Shields

Jeremy Moskowitz's companion book on Group Policy continues with best practices for Desktop Management. This eBook chapter is entitled Client Security with WSUS 3.0 and MBSA and is part of a larger series of chapters from his book, Creating the Secure Managed Desktop. Got holes in your armor? Possible? How about likely. You need a patch kit. And Microsoft Windows Software Update Services (WSUS) is your ticket to patched-up-ville. If you've used SUS or an older version of WSUS, you're going to love this chapter because we talk about the latest version -- WSUS 3.0 and all its new features. You'll learn about the seven (wow!) ways to architect WSUS (with specific advice about which ways are best for your environment). Then, we'll deploy our WSUS and use (insert fanfare here!) Group Policy to configure those clients so they're "picked up" by the WSUS server. But WSUS can't patch all your holes. That's where the Microsoft Baseline Security Analyzer comes in: it can find things that WSUS can't find. And we'll show you how to automate your MBSA so you're constantly "in the know" about any situations that come up. Note: This chapter was written by WSUS and MBSA Propeller-Head Greg Shields. Come to www.GPanswers.com/book to Get signed hardcopies and learn more about the printed book (as well as its companion book Group Policy Fundamentals, Security, and Troubleshooting.). At GPanswers.com, youll also find supplemental downloads for these chapters as well as any downloadables for each chapter. Join the GPanswers.com newsletter list for news and updates.

ebook

First published February 12, 2008